[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <87r6veqhk2.fsf@amd64.home>
Date: Tue, 05 Dec 2006 22:16:45 +0300
From: eugeny gladkih <john@...eb.com>
To: "Michael Scheidell" <scheidell@...nap.net>
Cc: "ss_team" <ssteam.pl@...il.com>, <bugtraq@...urityfocus.com>,
<security@...antec.com>
Subject: Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
>>>>> "MS" == Michael Scheidell <scheidell@...nap.net> writes:
>> we've found local privilege escalation in Symantec LiveState agent.
>>
>> PoC:
>>
>> 1. kill shstart.exe process
MS> Wouldn't you have to be administrator to kill shstart.exe?
LocalSystem account has more privilegies then administrator's one.
--
Yours sincerely, Eugeny.
Doctor Web, Ltd. http://www.drweb.com
Powered by blists - more mailing lists